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Abstract 

We show that, given a general mixed state for a quantum system, there 
are no physical means for broadcasting that state onto two separate quantum 
systems, even when the state need only be reproduced marginally on the 
separate systems. This result generalizes and extends the standard no-cloning 
theorem for pure states. 
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The fledgling fleld of quantum information theory |l| draws attention to fundamental 
questions about what is physically possible and what is not. An example is the theorem 
I^J^ that there are no physical means by which an unknown pure quantum state can be re- 
produced or copied — a result summarized by the phrase "quantum states cannot be cloned." 
In this paper we formulate and prove an impossibility theorem that extends and general- 
izes the pure-state no-cloning theorem to mixed quantum states. The theorem answers the 
question: are there any physical means for broadcasting an unknown quantum state, pure or 
mixed, onto two separate quantum systems? By broadcasting we mean that the marginal 
density operator of each of the separate systems is the same as the state to be broadcast. 

The pure-state "no-cloning" theorem prohibits broadcasting pure states, for the only 
way to broadcast a pure state is to put the two systems in the product state |^) ® 
i.e., to clone Things are more complicated when the states are mixed. A mixed-state 
no-cloning theorem is not sufficient to demonstrate no-broadcasting, for there are many 
conceivable ways to broadcast a mixed state p without the joint state being in the product 
form p® Pi the mixed-state analog of cloning; the systems might be correlated or entangled 
in such a way as to give the right marginal density operators. For instance, if the density 
operator has the spectral decomposition p = J2b^b\b){b\, a potential broadcasting state is 
the highly correlated joint state p = J2b ^b\b)\b){b\ {b\, which, though not of the product form 
p® Pi reproduces the correct marginal probability distributions. 

The general problem, posed formally, is this. A quantum system AB is composed of two 
parts, A and B, each having an A^-dimensional Hilbert space. System A is secretly prepared 
in one state from a set ^ = {po7Pi} of two quantum states. System B, slated to receive the 
unknown state, is in a standard quantum state S. The initial state of the composite system 
AB is the product state ® S, where s = or 1 specifies which state is to be broadcast. 
We ask whether there is any physical process consistent with the laws of quantum theory, 
that leads to an evolution of the form ps ^ £{ps = p^, where ps is any state on 
the A^^- dimensional Hilbert space AB such that 
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tl AiPs) = Ps 



and 



tlBiPs) = Ps ■ 



(1) 



Here tiA and tie denote partial traces over A and B. If there is an S that satisfies Eq. (|T]) 
for both po and pi, then the set A can be broadcast. A special case of broadcasting is the 
evolution specified by S{ps ® S) = ® Ps! "we reserve the word cloning for this strong form 
of broadcasting. 

The most general action S on AB consistent with quantum theory is to allow AB to 
interact unitarily with an auxiliary quantum system C in some standard state and thereafter 
to ignore the auxiliary system that is, 



for some auxiliary system C, some standard state T on C, and some unitary operator U 
on ABC. We show that such an evolution can lead to broadcasting if and only if po and 
pi commute. This result strikes close to the heart of the difference between the classical 
and quantum theories, because it provides another physical distinction between commuting 
and noncommuting states. We further show that A is clonable if and only if po and pi are 
identical or orthogonal (poPi = 0). 

To see that the set A can be broadcast when the states commute, we do not need to 
attach an auxiliary system. Since orthogonal pure states can be cloned, broadcasting can 
be obtained by cloning the simultaneous eigenstates of po and pi. Let h = 1,...,N, 
be an orthonormal basis for A in which both po and pi are diagonal, and let their spectral 
decompositions be ps = J2bKb\b){b\. Consider any unitary operator U on AB consistent 
with U\b)\l) = \b)\b). If we choose S = |1)(1| and let 



The converse of this statement — that if A can be broadcast, po and pi commute — is 
more difficult to prove. Our proof is couched in terms of the concept of fidelity between two 
density operators. The fidelity F(po,pi) is defined by 




(2) 



Ps = u{ps®m^ = T.^sb\b)\b){b\{b\ 



(3) 



b 

we immediately have that po and Pi satisfy Eq. (|1]). 
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^(Po, pi) = trVpFVPo^ , (4) 

where for any positive operator O, i.e., any Hermitian operator with nonnegative eigenvalues, 
O^/^ denotes its unique positive square root. (Note that Ref. defines fidehty to be the 
square of the present quantity.) Fidehty is an analogue of the modulus of the inner product 
for pure states and can be interpreted as a measure of distinguishability for quantum 
states: it ranges between and 1, reaching O if and only if the states are orthogonal and 
reaching 1 if and only if po = Pi- It is invariant under the interchange 1 and under the 
transformation po UpoW, pi UpiW for any unitary operator U [^0- Also, from the 
properties of the direct product, one has that F(po ® ctq, pi o"i) = F(po, pi)F{ao, ai). 

Another reason F(po, pi) defines a good notion of distinguishability p is that it equals the 
minimal overlap between the probability distributions po{b) = ti^poEb) and pi{b) = ti^piEb) 
generated by a generalized measurement or positive operator-valued measure (POVM) {Ef,} 
i- That is i, 

^(Po,Pi) =min^^tr(po^,,)Y/tr(pi^b) , (5) 

where the minimum is taken over all sets of positive operators {Eh} such that J^b^b = 1- 
This representation of fidelity has the advantage of being defined operationally in terms of 
measurements. We call a POVM that achieves the minimum in Eq. (j^) an optimal POVM. 

One way to see the equivalence of Eqs. (||) and (H) is through the Schwarz inequality 
for the operator inner product tr(ASt): tr(AAt) ii{BB^) > \tT{AB^)\^, with equality if and 
only if A = aB for some constant a. Going through this exercise is useful because it leads 
directly to the proof of the no-broadcasting theorem. Let {Ef,} be any POVM and let U be 
any unitary operator. Using the cyclic property of the trace and the Schwarz inequality, we 
have that 

Y,^tT{poEh)^Jtr{p,Eb) 

b 

= E\/tr([/py^i?.pfm)ytr(pV^^,pf) 
b ^ ^ 
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b 



tr 



fjr 1/2 1/2 

[Upo Pi 



(I) 

(6) 



We can use the freedom in U to make the inequahty as tight as possible. To do this, we recall 
HJSH that max |tr(VD)| = tr\/OtO, where O is any operator and the maximum is taken over 
all unitary operators V. The maximum is achieved only by those V such that VO = V 0^0; 
that there exists at least one such V is insured by the operator polar decomposition theorem 
M. Therefore, by choosing 



TT 1/2 1/2 

Upo Pi 



1/2 1/2 
Pi POPl , 



we get that Y.by^'^iPoEb)yti{piEb) > F(po,Pi)- 

To find optimal POVMs, we consult the conditions for equality in Eq. 
from step I and the one following it: a POVM is optimal if and only if 



l/2pl/2 _ l/2pl/2 
t/Po % - P-bPl % 



(7) 



These arise 



(8) 



and 



tr([/py'Ebp}/') = pbtripiEb) > ^ I2b>0 



(9) 



When pi is invertible, Eq. (M) becomes 



ME, 



1/2 



PbEj 



1/2 
b 1 



(10) 



where 



M 



-l/2jr 1/2 

Pi Upo' 



-1/2 / 1/2 1/2 -1/2 

Pi ypi popi pi 



(11) 



is a positive operator. Therefore one way to satisfy Eq. (^) with /U;, > is to take E^ = 
\b){b\, where the vectors \b) are an orthonormal eigenbasis for M, with pi, chosen to be the 
eigenvalue of \b). When pi is noninvertible, there are still optimal POVMs. One can choose 
the first Eb to be the projector onto the null subspace of pi, in the support of pi, i.e., the 



ort ho complement of the null subspace, pi is invertible, so one can construct the analogue 
of M and proceed as for an invertible p\. Note that if both po and p\ are invertible, M is 
invertible. 

We begin the proof of the no-broadcasting theorem by using Eq. (^) to show that fidelity 
cannot decrease under the operation of partial trace; this gives rise to an elementary con- 
straint on all potential broadcasting processes £. Suppose Eq. (P is satisfied for the process 
£ of Eq. @, and let {E^} denote an optimal POVM for distinguishing po and pi. Then, for 
each s, tr(ps(£'fe ® U)) = tip^{tiji{ps)Eb) = tiAiPsEb); it follows that 

Fa(Po, Pi) = ^ ^tT{po{Eb ® i))^ti{pi{Eb ® U)) 

b 

> min V \/tr(po^c)\/tr(pi£^c) 

{Ec} c 

= F{Po,Pi). (12) 

Here Fa(PoiPi) denotes the fidelity F(po,pi); the subscript A emphasizes that Fa(PO)Pi) 
stands for the particular representation on the first line. The inequality in Eq. (|T2|) comes 
from the fact that {Eb ® 1} might not be an optimal POVM for distinguishing po and pi; 
this demonstrates the said partial trace property. Similarly it follows that 

Fb(po, Pi) = \/tr(po(ll ® £;,,)) y^tr(pi(ll ® Eb)) 

b 

>F{po,pi), (13) 

where the subscript B emphasizes that Fb(po,Pi) stands for the representation on the first 
line. 

On the other hand, we can just as easily derive an inequality that is opposite to Eqs. (|T2|) 
and (|T3|) . By the direct product formula and the invariance of fidelity under unitary trans- 
formations, 

F(po,pi) = F(po® T,pi ® T) (14) 
= f(u{po ® S ® T)U\ U{pi ® S ® T)U^) . 

Therefore, by the partial-trace property, 
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npo.Pi) (15) 

< F(trc (f/(po ® S ® T)f/t) , trc([/(pi ® S ® T)U^'' 



or, more succinctly, 

i"(po,Pi) < f{£{pq ® S),^(pi ® S)) = F(po,Pi) . (16) 
The elementary constraint now follows, for the only way to maintain Eqs. ([T2|), (|13]), anc? 



(16) is with strict equality. In other words, we have that if the set A can be broadcast, then 



there are density operators po and pi on AB satisfying Eq. (|T]) and 

Fa{.Pq, Pi) = F{pq, Pi) = Fb(po, Pi) . (17) 

Let us pause at this point to consider the restricted question of cloning. If A is to be 
clonable, there must exist a process £ such that ps = Ps ® Ps for s = 0, 1. But then, by 
Eq. we must have 

F(po, pi) = F(po ® Po, pi ® pi) = F(po, pi)2, (18) 

which means that F{po,pi) = 1 or 0, i.e., po and pi are identical or orthogonal. There can 
be no cloning for density operators with nontrivial fidelity. The converse, that orthogonal 
and identical density operators can be cloned, follows, in the first case, from the fact that 
they can be distinguished by measurement and, in the second case, because they need not 
be distinguished at all. 

Like the pure-state no-cloning theorem 0,^, this no-cloning result for mixed states is 
a consistency requirement for the axiom that quantum measurements cannot distinguish 
nonorthogonal states with perfect reliability. If nonorthogonal quantum states could be 
cloned, there would exist a measurement procedure for distinguishing those states with 
arbitrarily high reliability: one could make measurements on enough copies of the quantum 
state to make the probability of a correct inference of its identity arbitrarily high. That this 
consistency requirement, as expressed in Eq. ([T^), should also exclude more general kinds of 
broadcasting problems is not immediately obvious. Nevertheless, this is the content of our 



claim that Eq. ([TTD generally cannot be satisfied; any broadcasting process can be viewed 
as creating distinguishability ex nihilo with respect to measurements on the larger Hilbert 
space AB. Only for the case of commuting density operators does broadcasting not create 
any extra distinguishability. 

We now show that Eq. ( [T7| ) implies that po ^^nd pi commute. To simplify the exposition, 
we assume that po and pi are invertible. We proceed by studying the conditions necessary 
for the representations Fa(po,Pi) and Fb(po,Pi) in Eqs. ([T2|) and (IT^) to equal F(po,pi). 
Recall that the optimal POVM {E^} for distinguishing po and pi can be chosen so that the 
POVM elements Ei, = \h) {h\ are a complete set of orthogonal one-dimensional projectors onto 
orthonormal eigenstates of M. Then, repeating the steps leading from Eqs. (|^) to @, one 
finds that the necessary conditions for equality in Eq. are that each i?;,®]! = (E'^®!)^/^ 
and each U (g) = (U (g) Ebf/"^ satisfy 

ijpl'\t ® E,) = a, p\'\^ ® E,) , (19) 
Vpl'\E, ® U) = f3kpT{E, ® U) , (20) 

where ctj, and (3h are nonnegative numbers and U and V are unitary operators satisfying 



rr -1/2 -1/2 f> -1/2 -1/2 /-1/2- -1/2 /^i \ 

Up^ p/ = Vp^ p/ = VPi Pop/ • (21) 

Although Po and pi are assumed invertible, one cannot demand that po and pi be invertible — 
a glance at Eq. (^ shows that to be too restrictive. This means that U and V need not be 
the same. Also we cannot assume that there is any relation between ai, and 

The remainder of the proof consists in showing that Eqs. (p!9D through ([21|), which are nec- 
essary (though perhaps not sufficient) for broadcasting, are nevertheless restrictive enough 



to imply that po and pi commute. The first step is to sum over h in Eqs. (0) and 
Defining the positive operators 

G = Y.a,\h){h\ and = ^ (&| , (22) 

b b 

we obtain 



iipy^ = pi/2(u ® G) and Vp'J^ = pl^\H ® U) . (23) 

The next step is to demonstrate that G and H are invertible and, in fact, equal to 
each other. Multiplying the two equations in Eq. (|23|) from the left by pl^'^U^ and Po^'^V\ 
respectively, and partial tracing the first over A and the second over B, we get 

po = ti^{pl^'Wpy')G and po = ti,{pl^'V^ p^') H . (24) 

Since, by assumption, po is invertible, it follows that G and H are invertible. Returning to 
Eq. (|23|), multiplying both parts from the left by pY^ and tracing over A and B, respectively, 
we obtain 

tT^{pl^^Upl^^)=piG and tT^{py^Vp'J^)=piH . (25) 

Conjugating the two parts of Eq. (|25|) and inserting the results into the two parts of Eq. (|2lD 
yields 

Po = GpiG and po = HpiH . (26) 

This shows that G = H, because these equations have a unique positive solution, namely 
the operator M of Eq. (pT]). This can be seen by multiplying Eq. ( p6l) from the left and right 
by Pi^^ to get Px"^ PoPx"^ = (Pi^^Cpi^^)^- The positive operator p\^'^Gp\^'^ is thus the unique 
positive square root of p^^^poPi^^- 

Knowing that G = H = M, we return to Eq. (^). The two parts, taken together, imply 
that 

V^Up'J^ = py^{M-^® M) . (27) 

If 1 6) and |c) are eigenvectors of M, with eigenvalues ph and pc, Eq- ([27| ) implies that 

V^^t/(po/»|c)) = ^(pf|6)|c)). (28) 
^ ^ Pfe ^ ^ 

—1/2 ~ . ~ 

This means that pr\b)\c) is zero or it is an eigenvector of the unitary operator V^U . In the 
latter case, since the eigenvalues of a unitary operator have modulus 1, it must be true that 
Pfc = Pc. Hence we can conclude that 
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pT\b)\c) = Q when fib ^ lie. (29) 

This is enough to show that M and po commute and hence [po) Pi] = 0. Consider the matrix 
element 

(fe'KMpo - PoM)|6) = [fly - iib){h'\po\h) 

= (/i6'-p6)E(^1(c|Po|c)|&). (30) 

c 

If p5 = pb', this is automatically zero. If, on the other hand, p^ 7^ pf,/, then the sum over c 
must vanish by Eq. (129|) . It follows that po and M commute. Hence, using Eq. (p6l). 



PiPo = M-ipoM-Vo = PoM-'poM-' = popi . (31) 
This completes the proof that noncommuting quantum states cannot be broadcast. 

~1 /2 

Note that, by the same method as above, p/ \b)\c) = when pf, 7^ pc. This condition, 
along with Eq. (p9|), determines the conceivable broadcasting states, in which the correlations 
between the systems A and B range from purely classical to purely quantum. For example, 
since po and pi commute, the states of Eq. satisfy these conditions, but so do the perfectly 
entangled pure states J2b V^\t')\b) ■ Not all such broadcasting states can be reahzed by a 
physical process S, but sufficient conditions for realizability are not known. 

In closing, we mention an application of this result. In some versions of quantum cryp- 
tography , the legitimate users of a communication channel encode the bits and 1 into 



nonorthogonal pure states. This is done to ensure that any eavesdropping is detectable. 



since eavesdropping necessarily disturbs the states sent to the legitimate receiver |]TT|. If 
the channel is noisy, however, causing the bits to evolve to noncommuting mixed states, the 
detectability of eavesdropping is no longer a given. The result presented here shows that 
there are no means available for an eavesdropper to obtain the signal, noise and all, intended 
for the legitimate receiver without in some way changing the states sent to the receiver. 

We thank Richard Hughes for useful discussions. This work was supported in part by 
the Office of Naval Research (Grant No. N00014-93-1-0116). 
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